Analysis
-
max time kernel
3s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25/12/2023, 22:38
General
-
Target
40d122ff0caa0962286bfa8e4a4c2ca9.exe
-
Size
3.6MB
-
MD5
40d122ff0caa0962286bfa8e4a4c2ca9
-
SHA1
159606b14e6705eaa918704d45a51a687693d68a
-
SHA256
5f8f65f16ae7816e0191cfa78728f31074d5b2e979f52b71876bf35e91ae5882
-
SHA512
c7124b18d40a4484138df70d11b7c8ca6dd6d8ab6c400a59182dc2f881f769b303b1a956f27d3cf589b130e650564a43f17500a40be817e5d6276cb7c1bb9b22
-
SSDEEP
98304:zRS6nfSOQZOt+CW+7EELhF3gxpNOf2k2Y/g71NjLYV:zkj8NBFwxpNOuk2HLYV
Score
8/10
Malware Config
Signatures
-
Stops running service(s) 3 TTPs
-
Launches sc.exe 2 IoCs
Sc.exe is a Windows utlilty to control services on the system.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\40d122ff0caa0962286bfa8e4a4c2ca9.exe"C:\Users\Admin\AppData\Local\Temp\40d122ff0caa0962286bfa8e4a4c2ca9.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\5BhQOniO8QJ.exe"C:\Users\Admin\AppData\Local\Temp\5BhQOniO8QJ.exe" QzpcVXNlcnNcQWRtaW5cQXBwRGF0YVxMb2NhbFxUZW1wXDQwZDEyMmZmMGNhYTA5NjIyODZiZmE4ZTRhNGMyY2E5LmV4ZQ==2⤵
-
C:\Windows\SYSTEM32\cmd.exe"cmd.exe" /C sc stop "SysMain" & sc config "SysMain" start=disabled3⤵
-
C:\Windows\system32\sc.exesc config "SysMain" start=disabled4⤵
- Launches sc.exe
-
-
C:\Windows\system32\sc.exesc stop "SysMain"4⤵
- Launches sc.exe
-
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
24KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
3.1MB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
224KB
-
Filesize
64KB
-
Filesize
456KB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
3.1MB
-
Filesize
16KB
-
Filesize
744KB
-
Filesize
10.8MB
-
Filesize
24KB
-
Filesize
10.8MB
-
Filesize
2.9MB
-
Filesize
200KB
-
Filesize
32KB
-
Filesize
24KB
-
Filesize
624KB
-
Filesize
16KB
-
Filesize
4.2MB
-
Filesize
192KB
-
Filesize
64KB